What is claimed is: 

1 . A method to delegate access and authorization control by a grantor to a grantee within 
an Information Technology System, the method comprising: 

a) a creation of an electronic proxy document, or proxy, the proxy identifying the 
grantor, identifying the grantee, and specifying the scope of grant; 

b) a submittal by the grantee of a request for access to a resource repository, where 
the request for access is authorized by the proxy; 

c) validation by the resource repository of the request for access as authorized by the 
proxy; and 

d) permitting access as requested by the request for access. 

2. The method of claim 1 , wherein the method further comprises an electronic 
signature of the proxy by the grantor. 

3 . The method of claim 1 , wherein the method further comprises XML documents. 

4. The method of claim 2, wherein the method further comprises the electronic 
signature comprises public key cryptography. 

5. The method of claim 1, wherein the method further comprises electronic data 
interchange messages. 
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6. The method of claim 1 , wherein the method further comprises formatted digital 
messages. 

7. A method according to claim 1 , wherein the method further comprises a 
validation of the proxy authorization of the request for access by means of a 
cryptographic authentication technique. 

8. The method of claim 1 , wherein the method further comprises a provision of the 
proxy to the resource repository. 

9. The method of claim 8, wherein the method further comprises the provision of the 
proxy to the resource repository via a proxy registry. 

10. The method of claim 1 , wherein the method further comprises a revocation of a 
previously issued scope of grant by the proxy. 
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